DynamoDB is just one of the data sources that you can use, and any of them can be used for Realtime data with GraphQL subscriptions as well as authorization schemes:
https://docs.aws.amazon.com/appsync/latest/devguide/tutorial...
https://docs.aws.amazon.com/appsync/latest/devguide/real-tim...
https://docs.aws.amazon.com/appsync/latest/devguide/security...